PT-2025-41290

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0 Description A security issue exists in SourceCodester Student Grades Management System. The add user function within the /admin.php file, specifically in the Manage Users Page...

EUVD-2018-3776

Malware in sbrugna...

EUVD-2019-17089

Malware in sbrugna...

EUVD-2017-2684

Malware in sbrugna...

EUVD-2021-25867

Malware in sbrugna...

EUVD-2019-13479

Malware in sbrugna...

EUVD-2019-0127

Malware in sbrugna...

EUVD-2018-3775

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2025-984981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984981 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: UDF. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0...

EUVD-2024-38917

Malicious code in bioql PyPI...

EUVD-2023-47750

Malicious code in bioql PyPI...

EUVD-2025-25399

Malicious code in bioql PyPI...

EUVD-2025-4916

Malicious code in bioql PyPI...

EUVD-2024-50893

Malicious code in bioql PyPI...

PT-2025-37016

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin for WordPress versions prior to 67.7.1 Description: The plugin is susceptible to privilege escalation due to missing validation on a user-controlled key within the MJ gmgt gmgt add user function...

parisc: Revise __get_user() to probe user read access

...

CVE-2025-9241 elunez eladmin exportUser csv injection

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited...

CVE-2025-9241 elunez eladmin exportUser csv injection

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited...

CVE-2025-9241

CVE-2025-9241 affects elunez eladmin up to version 2.7. The vulnerability resides in the exportUser function, which does not escape/export CSV content, enabling CSV injection. Exploitation can be remote and public exploits exist. Multiple connected sources corroborate the issue and identify the s...

CVE-2025-50927: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via injecting a crafted payload into the ftpusername parameter...